This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.cer File: uBUlrhpa_O8ZP1pAF3vyc4iDEHg.cer (raw, json) Hash identifier: QBbXOOrZEdEZPlQUmN/PR4IyYpfxFogXZ0ByXP90Rnc= Subject key identifier: B8:15:25:AE:1A:5A:FC:EF:19:3F:5A:40:17:7B:F2:73:88:83:10:78 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B353AAA2096DB032E609C6FB9EC3580 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/90/f704a8-8d76-422e-b960-9ef838490042/1/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/90/f704a8-8d76-422e-b960-9ef838490042/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:17:24 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43605 IP: 193.46.77.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:3a:aa:20:96:db:03:2e:60:9c:6f:b9:ec:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:17:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b81525ae1a5afcef193f5a40177bf27388831078 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:78:45:f3:7f:6b:d8:57:2b:e7:ba:24:bf:ee: 33:8d:02:a1:13:59:50:eb:52:46:19:23:1e:25:d5: 61:27:a0:3d:77:7c:b3:81:e7:c1:65:39:09:91:b5: 90:eb:3d:79:be:7c:20:16:b6:95:9c:11:79:40:13: 21:4c:fc:3d:f8:73:ac:68:1e:d0:91:74:7f:03:ab: f3:29:54:76:b2:a1:46:78:a0:5e:b6:33:4e:0d:c8: 57:84:fd:00:e9:46:bb:4b:9b:8d:dd:eb:d2:3b:69: 9c:4a:3b:6c:3e:dc:e4:7f:14:6a:a7:27:7e:31:d3: d3:a9:cc:81:24:48:e4:65:6f:81:79:59:6d:56:ad: 09:b6:35:30:eb:9e:10:af:5d:84:45:19:43:24:73: 4d:c9:d3:a9:96:31:c4:c3:bb:aa:73:22:47:34:b6: 9b:f6:59:6d:0d:61:20:3c:40:99:da:36:75:9a:a5: 28:6b:f4:31:81:58:b1:48:87:9b:63:7c:52:7b:8e: 38:4f:fb:c4:c1:c5:78:cd:e8:b8:eb:f4:90:da:94: 35:9d:bc:4a:02:a2:e0:29:b6:01:ab:64:47:d2:7b: 25:0a:af:b1:c4:37:3f:9a:1a:95:b3:f1:0c:bf:e9: 74:98:c1:ea:c6:68:c6:8c:0a:71:5c:e8:9e:73:d2: 6f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:15:25:AE:1A:5A:FC:EF:19:3F:5A:40:17:7B:F2:73:88:83:10:78 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f704a8-8d76-422e-b960-9ef838490042/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f704a8-8d76-422e-b960-9ef838490042/1/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.46.77.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43605 Signature Algorithm: sha256WithRSAEncryption 67:26:24:27:35:06:bd:9f:37:be:3c:de:75:1a:c1:82:ce:a3: 5a:6b:2e:73:89:f8:b1:66:97:d9:06:95:9e:6a:9a:0e:86:fd: b9:a5:fd:45:3f:55:82:01:d7:75:65:18:9a:98:87:9c:9f:6a: 86:88:17:7f:bd:4a:cc:8e:b2:14:83:0f:b6:a8:e0:f6:a5:09: e9:85:b7:97:0b:13:30:af:1f:69:0f:ce:aa:c3:81:7e:3b:94: a6:cd:9b:1b:35:31:d3:c9:0b:4a:1f:a0:31:87:dc:04:19:3f: 11:80:35:7a:98:55:40:a3:a1:e9:24:42:37:cd:a2:10:64:cd: f0:a2:64:c6:f8:3a:91:a6:9a:6f:0f:d9:08:fe:39:9b:cb:3c: 2a:49:04:a7:14:d1:6e:19:e5:7a:53:48:fa:16:65:6f:0e:7c: d2:cf:b6:98:fb:17:b5:07:7d:f6:f2:10:e6:3b:59:53:30:bf: bb:d0:f2:bb:ce:59:a2:cc:df:61:41:89:b7:06:3c:43:b7:a2: e6:08:7c:41:c5:90:e2:e6:14:8d:b4:31:58:64:99:81:8a:bb: 3d:fe:03:47:98:6b:3f:66:a7:ee:cb:4d:48:52:53:1e:e8:4d: 09:0c:e6:7f:a8:0d:94:79:a1:1d:f2:29:18:d5:1a:02:81:15: 19:84:e3:81 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt7NTqqIJbbAy5gnG+57DWAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxNzI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiODE1MjVhZTFhNWFmY2VmMTkzZjVhNDAxNzdiZjI3Mzg4ODMxMDc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3hF839r2Fcr57okv+4zjQKhE1lQ 61JGGSMeJdVhJ6A9d3yzgefBZTkJkbWQ6z15vnwgFraVnBF5QBMhTPw9+HOsaB7Q kXR/A6vzKVR2sqFGeKBetjNODchXhP0A6Ua7S5uN3evSO2mcSjtsPtzkfxRqpyd+ MdPTqcyBJEjkZW+BeVltVq0JtjUw654Qr12ERRlDJHNNydOpljHEw7uqcyJHNLab 9lltDWEgPECZ2jZ1mqUoa/QxgVixSIebY3xSe444T/vEwcV4zei46/SQ2pQ1nbxK AqLgKbYBq2RH0nslCq+xxDc/mhqVs/EMv+l0mMHqxmjGjApxXOiec9JvcQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFLgVJa4aWvzvGT9aQBd78nOIgxB4MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkwL2Y3MDRh OC04ZDc2LTQyMmUtYjk2MC05ZWY4Mzg0OTAwNDIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTAvZjcwNGE4 LThkNzYtNDIyZS1iOTYwLTllZjgzODQ5MDA0Mi8xL3VCVWxyaHBhX084WlAxcEFG M3Z5YzRpREVIZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwS5NMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCqVTANBgkqhkiG9w0BAQsFAAOCAQEAZyYkJzUGvZ83vjzedRrBgs6jWmsuc4n4 sWaX2QaVnmqaDob9uaX9RT9VggHXdWUYmpiHnJ9qhogXf71KzI6yFIMPtqjg9qUJ 6YW3lwsTMK8faQ/OqsOBfjuUps2bGzUx08kLSh+gMYfcBBk/EYA1ephVQKOh6SRC N82iEGTN8KJkxvg6kaaabw/ZCP45m8s8KkkEpxTRbhnlelNI+hZlbw580s+2mPsX tQd99vIQ5jtZUzC/u9Dyu85ZoszfYUGJtwY8Q7ei5gh8QcWQ4uYUjbQxWGSZgYq7 Pf4DR5hrP2an7stNSFJTHuhNCQzmf6gNlHmhHfIpGNUaAoEVGYTjgQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:47:08 2026 by rpki-client